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VERSION WITH MARKINGS TO SHOW CHANGES MADE 



IN THE CLAIMS 

Please cancel claims 14-17 without prejudice or 
disclaimer of the subject matter thereof. 

Please amend the claims as follows: 

2. (Amended) A public-key encryption method for data 
transmitted between a sender who encrypts data to send with a 
public key and a receiver who decrypts the data encrypted and 
delivered to the receiver with a secret key corresponding to 
said public key, said public-key encryption method comprising 

(a) a key generation step which the receiver conducts 
by working the receiver-end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4), q = 3 (mod 4)_^, 
s e Z/ = 1 (mod pq)-;-_^ 

p € Z/ ap = 1 {mod 1cm (p _ 1, q _ l) ) , 
and 

generating a public key (n, g, h, k, 1, a) consisting 

of elements n, g, h, k, 1, and a is the bit length of pq) 
where : 

- a/ 9/ k, 1 e Z (0 < g, h < n)^_^ 
n = p**q (where d is an odd number) 
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(b) an encryption step which the sender conducts by 
working the sender- end device, according to a procedure 
comprising : 

calculating the following equations with regard to a 
plaintext m (0 < m < 2^-^) and a random number r (0 g r ^ 1) : 

C = m2"g*^ mod n, D = h'^ mod n 

calculating a Jacobi symbol a = (m/n)-; — and^ 

composing a ciphertext (C,D,a) from the obtained C,D 

and a, and 

sending the ciphertext (C, D, a) to said receiver.^^ 

(c) a decryption step which said receiver conducts by 
working said receiver- end device^ according to a procedure 
comprising : 

calculating the following from the ciphertext (C, D, 
a)^ using said secrete key (p, q, s, p) where : 

mi,p = (CP*) 4 modp, 

mi^q = (CP*) * * mod q 

and 

finding one that fulfills conditions (x/n) = a and 0 < 
X < 2*^-2 from among ^ (m ^ ^, m , ^ (-m ^ ^, ^ i, ' ^ (™ i. p' 
-m ^ ^) , ^ ("^ 1 p/ 1 determining the one as the 

plaintext m (where ^ represents ring isomorphism mapping from 

Z/ (p) X Z (q) to Z/ (pq) according to Chinese remainder 
theorem) . 
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3. (Amended) The public-key encryption method as 
recited in claim 2, further comprising: 

a step that said sender composes said plaintext m 
including check data for verifying the recovery of true 

information h^y r^R^!T•yp^ i on in afiHihinn ho a nn^ggagf> h^yh lAjb -i r^b 
mni=if bf^ t-ran.gm-i hhf^rf ho gaiH -rf^nf^-iwr 

7. (Amended) A public-key decryption method for 
decrypting a ciphertext encrypted in accordance with the 
method of claim 6, comprising the steps of: 

carrying out the decryption procedure in the public- 
key encryption method set forth in claim 2; 

verifying the validity of the calculation procedure by 
exclusive OR and data coherence executed as set forth in claim 
€4 and 

oiihpnhh-ing hhp> Tf^gnlh of lif^r-ryph -i on 

8. (Amended) A public-key encryption method for data 
transmitted between a sender who encrypts data to send with a 
public key and a receiver who decrypts the data encrypted and 
delivered to the receiver with a secret key corresponding to 
said pxiblic key, said public-key encryption method comprising: 

(a) a key generation step which the receiver conducts 
by working the receiver-end device.^ according to a procedure 
comprising : 

generating a secret key (p, q, p) consisting of 
elements p, q, and p, where: 
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p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4)^^ 

- (3 € Z/ ap ^ 1 (mod 1cm (p _ 1, q _ 1) ) , 
and 

generating a public key (n, k, a) consisting of 
elements n, k, and a is the bit length of pq) , where: 

n = p**q (where d is an odd number)^; 

(b) encryption which the sender conducts by working 
the sender-end device^ according to a procedure comprising: 

calculating the following equation with regard to a 
plaintext m (0 < m < 2^-^) where : 

m^ = {mO^"- e G (r) ) | | (r © H {mO»^^ © G(r))) (0 < m^ < 2^-^) (where 

G: {0, 1}'^° _> {O, l}-* , H: {o, l}° {o, l}^°are suitable 

random functions, subject to k = n + k^ +2) , 

calculating a Jacobi symbol a = (m^/n) and the 
following equation: 
C = m^^a laod n^ 

composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, a) to said receiver, 

(c) a decryption step which said receiver conducts by 
working said receiver- end device^ according to a procedure 
comprising : 

calculating the following from the ciphertext (C, a) , 
using said secrete key (p, q, p) where ; 
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mi,p = C7 < mod p, 

tni^g = C * mod g 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2^-2 from among ^ (m ^ ' ^> ("^ i. p' i, ' i, p' "^^ 

, ) i d i-va ^ , -m ^ ) and determining the x as m' (where A 

represents ring isomorphism mapping from Z/ (p) x Z (q) to 

Z/ (pq) according to Chinese remainder theorem) and 

calculating the following, assuming m'^ = s' | |t' (where 
s' is upper n bits of m' and t' is lower k bits thereof) : 

® Git' ® H(50)r"*» if W ® Gif ® H{s*))]k, = 

. otherwise 

(where [a]" and [a]^ represent upper n bits and lower n bits of 
the a, respectively. An asterisk (*) as the result of 
decryption denotes that decryption is unsuccessful—) , thereby 
obtaining the result of decryption. 




9. (Amended) A public-key encryption method for 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said piiblic key, said public-key encryption 
me t hod compr i s ing : 

(a) a key generation step which the receiver conducts 
by working the receiver- end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 
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elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4)^_^ 
s € Z/ = 1 (mod pq)-;-j^ 

- p G Z/ ap = 1 (mod 1cm (p _ l, q _ l) ) , 

and 

generating a public key (n, g, h, k, 1, ot) consisting 

of elements n, g, h, k, 1, and a is the bit length of pq) 
where : 

- a/ 9/ k, 1 G Z (0 < g, h < n)^_^ 

n = p*^q (where d is an odd number).^; 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

calculating the following equation with regard to a 

plaintext m (0 < ra < 2*^-^) and a random number r' (0 ^ r' ^ 
1) : 

m^ = (mO^^ ® G (r)) | | (r ® H (mO^^ ® G(r))) (0 < m^ < 2^-^ 

(where G: {O, 1}'^° _> {O, l}" , H: {O, l}'^ {O, l}^^oare 

suitable random functions, subject to k = n + k^ +2) , 

calculating a Jacobi symbol a = (m^/n) and the 
following equations: 
C = m^2agr- niod n, D = h^' mod n^ 

composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, D, a) to said receiver-^_^ 
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(c) decryption which said receiver conducts by working 
said receiver-end device, according to a procedure comprising: 

calculating the following from the ciphertext (C, D, 

a) , using said secrete key (p, q, s, p) where : 
C = m^2agr' mod n, D = h^' mod n_^ 

finding x that fulfills conditions (x/n) = a and 0 < x 
< 2*^-2 from among ^ (m ^ ^ i, q) ' (f> ('^ i, p' i, ' (/> i, p' 
^ q) / <^ ^""^ 1 p' 1 q^ determining the x as m'^ (where ^ 

represents ring isomorphism mapping from Z/ (p) x Z (q) to Z/ 

(pq) according to Chinese remainder theorem)^, and 

calculating the following, assuming m'^ = s' | |t' (where 
s' is upper n bits of m'^ and t' is lower k^ bits thereof) : 

![s' e Git' e H{8'))T-^^ if [s' © G{t' ®H{s'))]k, = 0*' 
* otherwise 
(where [a]° and [a]^ represent upper n bits and lower n bits of 

the a, respectively. An asterisk (*) as the result of 

decryption denotes that decryption is unsuccessful^) _^ thereby 

obtaining the result of decryption. 

10. (Amended) A public-key encryption method for 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said public key, said public-key encryption 
method comprising : 

(a) a key generation step which the receiver conducts 
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by working the receiver-end device, according to a procedure 
comprising : 

generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4) ; 
s e Z/ = 1 (mod pq)^_^ 

- p G Z/ ap = i (mod 1cm (p _ 1, q _ 1) ) , 

and 

generating a public key (n, g, h, k, 1, a) consisting 

of elements n, g, h, k, 1, and a is the bit length of pq) 
where ; 

- a/ 9/ h, k, 1 e Z (0 < g, h < n)4-j_ 

n = p<*q (where d is an odd number) , 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

calculating the following equation with regard to a 
plaintext m (0 < m < 2°) : 

= (m © G (r) ) | | {r © H (m© G(r) ) ) (0 < m^ < 2^-=) 

(where G: {O, 1}*^° ^ {O, l}° , H: {O, l}° _> {O, l}'^*> are 

suitable random functions, subject to k = n + k^ +2) , 

calculating a Jacobi symbol a = (m^/n) and the 
following equations : 
C = m^2a gF(mi) xaod n, D = h^<"i> mod n 

(where F: {o, l}« + {o, l}^ is a suitable random function)_, 
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composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, D, a) to said receiver^; 
(c) decryption which said receiver conducts by working 
said receiver- end device, according to a procedure comprising: 

calculating the following from the ciphertext (C, 

a), using said secrete key (p, q, s, p) where: 

mi., = (CD')^ mod q 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2^-^ from among ^ {m ^ ^, i, q) ' ^ i, p' ^ i, ' i. p' 

) # <^ (-Tti , , -m , ) and determining the x as m' (where d 

represents ring isomorphism mapping from Z/ (p) x Z (q) to Z/ 

(pq) according to Chinese remainder theorem) and 

calculating the following, assuming m'^ = s' | |t' (where 
s' is upper n bits of m'^ and t' is lower k^ bits thereof) : 

®GifeH{8')) if (C?,D) = (C",DO 

otherwse 

(where, C and D' are obtained by: 

C = m' gF(m'i) xnod n, D' = h^^^'^^ mod n 

and [a]"* and [a]^ represent upper n bits and lower n bits of 

the a, respectively- A a, wherein asterisk (*) as the result 

of decryption denotes that decryption is unsuccessful-^)^ 
thereby obtaining the result of decryption. 
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12. (Amended) A public-key encryption method for 
data transmitted between a sender who encrypts data to send 
with a public key and a receiver who decrypts the data 
encrypted and delivered to the receiver with a secret key 
corresponding to said public key, said public -key encryption 
method comprising: 

(a) a key generation step which the receiver conducts 
by working the receiver-end device, according to a procedure 
comprising: 

generating a secret key (p, q, s, p) consisting of 
elements p, q, s, and p, where: 

p and q are prime numbers, p = 3 (mod 4) , q = 3 (mod 4)^_^ 
s e Z/ = 1 (mod pq)^^ 

P G aP = 1 (mod 1cm (p _ 1, q _ 1) ) , 
and 

generating a public key (n, g, h, k, 1, (x) consisting 

of elements n, g, h, k, 1, and a is the bit length of pq) 
where : 

- a/ 9/ h, k, 1 e Z (0 < 9/ h < n)^_^ 

n = p<*q (where d is an odd number) 

(b) encryption which the sender conducts by working 
the sender-end device, according to a procedure comprising: 

selecting a random number r (0 < r <2 '^^j with regard to 
a plaintext m (0 < m < 2^) 

calculating the following: 
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= m I I r 

(where F: {O, i}n+)co {q, l}^ is a suitable random function, 

subject to k = n + +2) , 

calculating a Jacobi symbol a = (m^/n) and the 
following equations : 

C = m^2« gp(mi) mod n, D = h^i^iJ mod n_^ 

composing a ciphertext (C,D,a) from the obtained C,D 
and a, and 

sending the ciphertext (C, D, a) to said receiver^; 
(c) decryption which said receiver conducts by working 
said receiver-end device, according to a procedure comprising: 
calculating the following from the ciphertext (C, D, 

a) , using said secrete key (p, q, s, p) : 

mi J, = {CD')^^ mod p, 

mi.g = mod g 

finding x that fulfills conditions (x/n) = a and 0 < x 

< 2^-2 from among ^ (m ^ ^, m ^ J , ^ (-m ^ ^, i, ' ^ i. p' 
1 ' <^ 1 p' 1 determining the x as m'^ (where ^ 

represents ring isomorphism mapping from Z/ (p) x 2 (q) to Z/ 

(pq) according to Chinese remainder theorem)^, and 
calculating the following: 

m = < 

I « otberwifie 

(where, C and D' are obtained by: 

C = m' gF{m'i) niod n, D' = h^tn'i) mod n 
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and [a]° and [a] ^ represent upper n bits and lower n bits of 

the a, respectively wherein asterisk (*) as the result 

of decryption denotes that decryption is unsuccessful—) , 
thereby obtaining the result of decryption. 
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